CVE-2016-5440

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR...

CVE-2016-5437

Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log...

Advantech WebAccess upAdminPg Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech WebAccess. Authentication is required to exploit this vulnerability. The specific flaw exists within upAdminPg.asp. One project administrator can view other project administrators...

Web Interface Privilege Escalation

Palo Alto Networks Panorama administrators have the ability to assign predefined permissions to users created on PAN-OS. A read-only user with CLI access could elevate web interface privileges. Ref. 88191...

WordPress Google Forms Plugin <= 0.84 - Cross Site Scripting (XSS)

Because of this vulnerability, attackers can steal Administrators' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...

CVE-2016-5092

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

CVE-2016-5092

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

Directory traversal

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

CVE-2016-4066

Fortinet FortiWeb is affected by a CSRF vulnerability (CVE-2016-4066) that allows an attacker to change administrator passwords by triggering crafted requests. The vulnerability is documented in Fortinet advisories and common CVE records, indicating impact on FortiWeb versions prior to 5.5.3. The...

CVE-2016-5092

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

WordPress Simple Membership 3.2.8 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Simple Membership WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Acrobat, Flash Player, Reader, and XMP Tookit for Java. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system Users and administrators are encouraged to review Adobe Securit...

Microsoft Releases Security Updates

Microsoft has released 11 updates to address vulnerabilities in Microsoft software. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Microsoft Security Bulletins MS16-084 through...

The vulnerability of the WebSphere Application Server software allows a malicious intruder to compromise the integrity of protected information.

Cross-site scripting XSS in the IBM WebSphere Application Server administrative console allows authorized administrators who have passed authentication to inject any web script or HTML code using a specially crafted URL address...

CVE-2016-2868

IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2016-3649

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests...

CVE-2016-3649

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests...

CVE-2016-5840

hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...

Code injection

Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...

CVE-2016-5729

CVE-2016-5729 is a Lenovo BIOS EFI Driver SMM code-execution vulnerability. A local attacker with administrative privileges can run arbitrary code in System Management Mode. Connected Lenovo advisory LEN-4901 confirms impact and provides per-product minimum fix versions (BIOS updates) to mitigate...